MagpieRSS (a simple RSS integration tool) Full path vul

Hello MagpieRSS a simple RSS integration tool Full path vul magpierss/rssfetch.inc.php magpierss/rssparse.inc.php...

CVE-2005-3955

CVE-2005-3955 affects MagpieRSS 7.1 as used in blogBuddiesv 0.3 and Jaws 0.6.2, allowing remote attackers to inject arbitrary scripts via (1) the url parameter to magpie_debug.php and (2) the rss_url parameter to magpie_slashbox.php and simple_smarty.php. The documented impact is cross-site scrip...

CVE-2005-3955

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...

CVE-2005-3955

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...

CVE-2005-3955: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...

[UNIX] MagpieRSS Remote Command Execution

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-3330: Improper Input Validation

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...